Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/zsOiuLmYstlU6Ttwp4opBSbVOGI.roa
File: zsOiuLmYstlU6Ttwp4opBSbVOGI.roa (raw, json)
Hash identifier: n/l5ja0rhsRWnljbtgpLdDFv4dozBaN5HN93S3rYCAs=
Subject key identifier: CE:C3:A2:B8:B9:98:B2:D9:54:E9:3B:70:A7:8A:29:05:26:D5:38:62
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC64A075823D605BD0AFA8A3977B741FD
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/zsOiuLmYstlU6Ttwp4opBSbVOGI.roa
Signing time: Mon 01 Jan 2024 18:29:49 +0000
ROA not before: Mon 01 Jan 2024 18:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206125
IP address blocks: 2a12:bec0:8f::/48 maxlen: 48
2a12:bec0:80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:07:58:23:d6:05:bd:0a:fa:8a:39:77:b7:41:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cec3a2b8b998b2d954e93b70a78a290526d53862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5b:07:a4:7e:d1:9f:78:0a:df:65:d5:43:d8:
c2:64:b5:7b:82:ff:b0:d3:0b:07:a9:f1:60:cb:d7:
49:1c:3f:c4:d7:5a:aa:8c:db:85:df:13:9a:2f:1a:
64:34:a6:05:4c:b8:a1:c6:da:60:01:5e:b1:48:04:
9f:ac:22:d8:40:d4:61:86:73:d3:08:7a:ea:a5:10:
d7:d0:82:b5:a5:db:4e:00:35:16:72:74:48:1d:2b:
f3:24:bd:9b:b8:c3:6a:8f:b5:02:5c:05:4d:f6:3d:
c2:31:2c:ad:d4:19:f5:dc:f5:c4:9e:46:1b:78:a6:
c6:1c:81:50:48:08:35:b7:36:8b:73:c4:8c:9d:b3:
cf:f4:34:5e:f1:77:77:d1:c7:d6:47:03:ba:02:ec:
f2:21:5d:fa:c9:5a:5f:5d:b9:ff:79:47:bb:0f:37:
83:3e:e3:15:b2:96:8f:6e:13:06:24:e5:82:84:a9:
62:f5:a6:99:a5:2c:27:0e:e5:94:81:1b:d2:97:01:
4f:dd:5b:84:c1:f5:46:70:f2:b8:0e:bc:aa:ef:c1:
7c:7f:c4:15:7d:50:ee:84:a2:ce:50:92:0d:2f:54:
2e:bf:f6:f8:19:99:c4:f1:e1:ba:c0:8b:a8:f8:67:
18:91:f3:8e:93:ff:bf:d5:20:b6:82:de:17:12:d2:
0c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C3:A2:B8:B9:98:B2:D9:54:E9:3B:70:A7:8A:29:05:26:D5:38:62
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/zsOiuLmYstlU6Ttwp4opBSbVOGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:80::/44
Signature Algorithm: sha256WithRSAEncryption
9d:ca:df:45:fb:c7:74:fe:e1:8c:a0:b3:87:56:96:26:8f:34:
a1:49:07:71:82:d2:d3:db:02:0b:b2:af:bf:c8:50:e3:7a:93:
6e:6c:27:d0:ca:79:5a:db:5e:fe:e3:33:b0:40:13:f9:85:63:
9b:78:39:af:da:26:00:a1:94:86:dd:c3:f0:17:bc:ad:70:55:
2a:b5:ec:25:92:72:3f:25:07:66:e9:04:cf:53:92:c4:27:7c:
df:9a:c3:a0:d4:df:d7:08:b2:9e:d6:07:fc:ce:90:be:de:c9:
c5:e9:72:4b:c7:be:e9:4e:28:bc:34:b7:12:37:ad:8e:1a:61:
a6:c5:36:af:b6:06:1c:06:b6:77:ff:49:d4:0c:ec:b1:16:e4:
40:b7:e5:a4:3a:c9:6c:2e:52:c9:da:b8:ca:33:4c:5a:4f:a8:
8f:74:0a:43:8c:d9:98:aa:72:2c:8b:1a:1b:f0:e9:e8:b4:07:
dd:a2:39:cc:0f:2a:a2:c8:6e:1f:dc:00:9b:5f:d6:a6:de:db:
d7:88:86:5c:84:c7:bb:d7:1a:87:a6:2b:96:93:4b:24:e4:36:
29:05:b5:e6:a9:8d:aa:fb:41:16:7f:e8:a5:a2:db:51:ee:24:
8d:e6:0b:da:ff:ee:af:8a:b1:16:49:85:5a:c9:31:c1:11:0d:
e1:68:a0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:01:17 2024 by rpki-client on console-ams.rpki-client.org